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AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A network having an intrusion protection system, 
comprising: 

a network medium; 

a management node connected to the network medium and running an intrusion 
prevention system management application; and 

a plurality of nodes connected to the network medium and running an instance of an 
intrusion protection system application, at least one of the nodes having an identification 
assigned thereto based on a logical assignment grouping one or more of the plurality of nodes, 
each node sharing an identification being commonly vulnerable to at least one network exploit; 
and 

a network-based intrusion protection system a pplia nce dedicated to filtering inbound and 
outbound data frames transmitted across the network medium . 

2. (Original) The network according to claim 1 wherein the management node is 
operable to originate a security update that is transmitted to each node sharing the identification, 
any remaining nodes not sharing the identification being excluded from receiving the update. 

3. (Original) The network according to claim 1 wherein a plurality of identifications 
are respectively assigned to one or more of the plurality of nodes. 

4. (Original) The network according to claim 1 wherein the identification is an 
Internet Protocol multicast group identification. 

5. (Previously Presented) The network according to claim 2 further comprising: 
a plurality of network mediums; and 

at least one router, the management node and the plurality of nodes each respectively 
connected to one of the plurality of network mediums in the network, the router disposed 
intermediate the plurality of network mediums and operable to forward the security update from 
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the network medium having the management node connected thereto to any nodes connected to 
the remaining network mediums and sharing the identification. 

6. (Original) The network according to claim 5 wherein the router determines 
whether any of the plurality of nodes connected to the remaining network mediums share the 
identification through implementation of the Internet group management protocol. 

7. ( Original) The network according to claim 1 wherein the network medium is an 
Ethernet. 

8. (Canceled) 

9. (Currently Amended) The network according to claim 8 claim I wherein the 

network-based intrusion protection system appliance interfaces with the network medium via a 
network interface card operating in promiscuous mode. 

1 0. (Currently Amended) The network according to claim 8 claim 1 wherein the 
network-based intrusion protection system appliance shares the identification. 

11-17. (Canceled) 
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